125 matches found
CVE-2026-47897
CVE-2026-47897 is a path traversal vulnerability in Apache Lucene.Net.Replicator. Affected: Lucene.Net.Replicator library (versions from 4.8.0-beta00005 up to, but before, 4.8.0-beta00018). Root cause: improper limitation of a pathname to a restricted directory, enabling potential access to restr...
CVE-2026-47897 Apache Lucene.Net: Arbitrary file write from malicious server to Lucene.Net.Replicator client
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache Lucene.Net Lucene.Net.Replicator library. This issue affects Apache Lucene.Net.Replicator: from 4.8.0-beta00005 before 4.8.0-beta00018. Users are recommended to upgrade to version 4.8.0-beta00018,...
CVE-2026-47897 Apache Lucene.Net: Arbitrary file write from malicious server to Lucene.Net.Replicator client
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache Lucene.Net Lucene.Net.Replicator library. This issue affects Apache Lucene.Net.Replicator: from 4.8.0-beta00005 before 4.8.0-beta00018. Users are recommended to upgrade to version 4.8.0-beta00018,...
CVE-2026-47897 Apache Lucene.Net: Arbitrary file write from malicious server to Lucene.Net.Replicator client
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache Lucene.Net Lucene.Net.Replicator library. This issue affects Apache Lucene.Net.Replicator: from 4.8.0-beta00005 before 4.8.0-beta00018. Users are recommended to upgrade to version 4.8.0-beta00018,...
CVE-2026-47897
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache Lucene.Net Lucene.Net.Replicator library. This issue affects Apache Lucene.Net.Replicator: from 4.8.0-beta00005 before 4.8.0-beta00018. Users are recommended to upgrade to version 4.8.0-beta00018,...
PT-2026-55516
Name of the Vulnerable Software and Affected Versions Apache Lucene.Net.Replicator versions 4.8.0-beta00005 through 4.8.0-beta00017 Description A Path Traversal issue exists in the Lucene.Net.Replicator library, which allows an unauthenticated user to perform an arbitrary file read on the...
PT-2026-55504
Name of the Vulnerable Software and Affected Versions Apache Lucene.Net.Replicator versions 4.8.0-beta00005 through 4.8.0-beta00017 Description A path traversal issue exists in the Lucene.Net.Replicator library due to improper input validation and sanitization of filesystem paths. This allows...
CVE-2026-32281 vulnerabilities
Vulnerabilities for packages: nova, flux-source-controller, gitness, envconsul, newrelic-nri-statsd, nats-server, nri-f5, openbao-k8s, opentofu, rqlite, aws-flb-firehose, newrelic-infrastructure-agent, tkn, kubernetes-csi-external-attacher, cloud-provider-azure, nsc, buf, kubernetes-dashboard-api...
CVE-2026-2265
An unauthenticated remote code execution RCE vulnerability exists in applications that use the Replicator node package manager npm version 1.0.5 to deserialize untrusted user input and execute the resulting object...
@belym.a.2105/testcafe (>=0.13.0-nightly.96bf9c47, <=1.15.0-alpha.4), @benbender/jest-config (>=0.1.0, <=0.6.0) +128 more potentially affected by CVE-2026-2265 via replicator (1.0.5)
replicator NPM version 1.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on replicator and may be impacted: - @belym.a.2105/testcafe =0.13.0-nightly.96bf9c47, =0.1.0, =1.8.5, =0.1.0-alpha.1, =1.1.4-alpha.30, =0.0.49, =3.7.4-depup.0, =0.0.0, =1.0.1,...
EUVD-2026-17958
An unauthenticated remote code execution RCE vulnerability exists in applications that use the Replicator node package manager npm version 1.0.5 to deserialize untrusted user input and execute the resulting object...
GHSA-2GMP-34J9-FQJM Replicator deserializes untrusted user input
An unauthenticated Remote Code Execution RCE vulnerability exists in applications that use the Replicator node package manager npm version 1.0.5 to deserialize untrusted user input and execute the resulting object...
Replicator deserializes untrusted user input
An unauthenticated Remote Code Execution RCE vulnerability exists in applications that use the Replicator node package manager npm version 1.0.5 to deserialize untrusted user input and execute the resulting object...
Deserialization of Untrusted Data
Overview replicator is an Advanced JavaScript objects serialization. Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the error messages decoding. An attacker can execute arbitrary code by supplying specially crafted input that is deserialized without prope...
@belym.a.2105/testcafe (>=0.13.0-nightly.96bf9c47, <=1.15.0-alpha.4), @benbender/jest-config (>=0.1.0, <=0.6.0) +128 more potentially affected by CVE-2026-2265 via replicator (1.0.5)
replicator NPM version 1.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on replicator and may be impacted: - @belym.a.2105/testcafe =0.13.0-nightly.96bf9c47, =0.1.0, =1.8.5, =0.1.0-alpha.1, =1.1.4-alpha.30, =0.0.49, =3.7.4-depup.0, =0.0.0, =1.0.1,...
CVE-2026-2265
An unauthenticated remote code execution RCE vulnerability exists in applications that use the Replicator node package manager npm version 1.0.5 to deserialize untrusted user input and execute the resulting object...
CVE-2026-2265 Replicator 1.0.5 is vulnerable to Remote Code Execution through Insecure Deserialization
An unauthenticated remote code execution RCE vulnerability exists in applications that use the Replicator node package manager npm version 1.0.5 to deserialize untrusted user input and execute the resulting object...
CVE-2026-2265
Applications utilizing the Replicator node package manager (npm) version 1.0.5 are susceptible to an unauthenticated Remote Code Execution (RCE) vulnerability. The root cause is the insecure deserialization of untrusted user input, which allows an attacker to execute the resulting object. This hi...
CVE-2026-2265 Replicator 1.0.5 is vulnerable to Remote Code Execution through Insecure Deserialization
An unauthenticated remote code execution RCE vulnerability exists in applications that use the Replicator node package manager npm version 1.0.5 to deserialize untrusted user input and execute the resulting object...
CVE-2026-2265 Replicator 1.0.5 is vulnerable to Remote Code Execution through Insecure Deserialization
An unauthenticated remote code execution RCE vulnerability exists in applications that use the Replicator node package manager npm version 1.0.5 to deserialize untrusted user input and execute the resulting object...